Wednesday , October 28 2026
NB

SCAM ALERT
‘NB’ app scam in Bangladesh; Thousands lost; 30 complaints to police

A new app dubbed ‘NB” TV is fast spreading in Bangladeshi but creating panic as well. By using the app some people have automatically lost money in different locations in Bangladesh. While installing, the app takes control over the smartphone and transfers money as its maker instructs.

The Cyber ​​Unit of the Detective Police of Bangladesh said that at least 30 such complaints have been filed in the last one month. Fraudsters usually trap the user through an SMS or advertisement.

Apple iOS 27.2 Released Fixes 163 Flaws, Including Critical WebKit RCE

Apple launched iOS 27.2 and iPadOS 27.2 on October 26, 2026, fixing 163 security flaws. The update is for iPhone...
Read More
Apple iOS 27.2 Released Fixes 163 Flaws, Including Critical WebKit RCE

CISA adds PHP2Shell to KEV, PHP Releases New Security Updates to Fix Critical HTTP2Shell flaw

CISA has updated a new alert to reflect the addition of CVE-2026-109618 and CVE-2026-109619 to its Known Exploited Vulnerabilities (KEV)...
Read More
CISA adds PHP2Shell to KEV, PHP Releases New Security Updates to Fix Critical HTTP2Shell flaw

Cloudflare Unveils Emergency WAF Ruleset Update on Brotli flaw

Cloudflare has shared an urgent update to its Web Application Firewall (WAF) rules due to CVE-2026-111497, a Brotli issue. The release...
Read More
Cloudflare Unveils Emergency WAF Ruleset Update on Brotli flaw

Daily Cyber security update for 26.10. 2026

Cyberattacks are rising around the world, including ransomware, malware, data leaks, and hacked websites. These events show how complex and...
Read More
Daily Cyber security update for 26.10. 2026

The Washington Post report
Ex-DOGE AI startup Cathedral Breaches Anthropic Internal Systems within 12 Hours

AI startup Cathedral gained a limited access to internal systems at Anthropic in less than 12 hours, exposing employee information,...
Read More
The Washington Post report  Ex-DOGE AI startup Cathedral Breaches Anthropic Internal Systems within 12 Hours

Daily Cyber security update for 25. 10. 2026

Cyberattacks are rising around the world, including ransomware, malware, data leaks, and hacked websites. These events show how complex and...
Read More
Daily Cyber security update for 25. 10. 2026

Daily Cyber security update for 24. 10. 2026

Cyberattacks are rising around the world, including ransomware, malware, data leaks, and hacked websites. These events show how complex and...
Read More
Daily Cyber security update for 24. 10. 2026

PHP shares new RCE flaw (CVE 2026-115560) with no patch but mitigation

The PHP security team shared ways to protect against a new flaw that lets someone run unwanted code on certain...
Read More
PHP shares new RCE flaw (CVE 2026-115560) with no patch but mitigation

US banks faced unauthorized access by AI agents in customer accounts: Axios reports

Major US banks have detected unauthorized access to customer accounts by third-party AI agents, with some systems taking actions beyond...
Read More
US banks faced unauthorized access by AI agents in customer accounts: Axios reports

Atlassian patched 176 flaw in Jira and Confluence: Fortinet Urges to Patch Flaws Affecting FortiOS, FortiManager

Fortinet has urged customers to prioritize security updates for FortiOS, FortiManager, and FortiAnalyzer scheduled for October 22, 2026. The coordinated...
Read More
Atlassian patched 176 flaw in Jira and Confluence: Fortinet Urges to Patch Flaws Affecting FortiOS, FortiManager
                               Pinki, Victim

Pinki, a middle-aged woman, downloaded an app called ‘NB’ after seeing an ad online. She said her phone froze right after she installed the app and then turned completely black.

He received many messages saying that a large amount of money had been transferred from his account one by one.

Soumya Kanti Das works for a private company. He was a victim of the same trick. He wanted to check things by using the Sky Banking app. But after he logged in, the phone screen went black and said ‘system updating’ in 30 seconds. He couldn’t press any buttons. Soon after, he got two messages: one for an ‘OTP’ and another to send 3 lakh taka to a different account.

               Soumya Kanti Das, Victim

He realized that this was not a system update, but that the phone had been remotely controlled by malware.

Syed Harun Or Rashid, Joint Police Commissioner of DMP’s Cyber ​​Unit, said that hackers are transferring money as if they were the user by taking control of the phone through hacking. Investigation shows that the money is going through various banking channels in the country and going to other accounts, many of which are controlled by fraudulent groups. In some cases, it is believed that these activities are being carried out outside the country, especially from China.

Cyber expert said many fake apps are out there. So, anyone shouldn’t download apps from any place except the official Play Store or App Store. It’s especially important to avoid free apps or games if you use banking or financial apps.

They said one should not click on unknown links or tempting deals without checking them first. They also mentioned that if you do this by accident, you should quickly turn off your internet.

Related topics:

Web Defacement Artifacts Found on Bangladesh Gov.t Infrastructure

How Millions of Illegal IMEI Phones Infiltrated Bangladesh’s Networks

Check Also

flaw

PHP shares new RCE flaw (CVE 2026-115560) with no patch but mitigation

The PHP security team shared ways to protect against a new flaw that lets someone …